[client] Add enrichment api

Author: richard-julien

pycti/entities/opencti_stix.py

@@ -11,16 +11,17 @@ def __init__(self, opencti):
 
     def delete(self, **kwargs):
         id = kwargs.get("id", None)
+        force_delete = kwargs.get("force_delete", True)
         if id is not None:
             self.opencti.app_logger.info("Deleting Stix element", {"id": id})
             query = """
-                 mutation StixEdit($id: ID!) {
+                 mutation StixEdit($id: ID!, $forceDelete: Boolean) {
                      stixEdit(id: $id) {
-                         delete
+                         delete(forceDelete: $forceDelete)
                      }
                  }
              """
-            self.opencti.query(query, {"id": id})
+            self.opencti.query(query, {"id": id, "forceDelete": force_delete})
         else:
             self.opencti.app_logger.error("[opencti_stix] Missing parameters: id")
             return None

pycti/entities/opencti_stix_core_object.py

@@ -1753,6 +1753,34 @@ def rules_rescan(self, **kwargs):
             self.opencti.app_logger.error("[stix_core_object] Missing parameters: id")
             return None
 
+    """
+        Ask enrichment with multiple connectors
+
+        :param element_id: the Stix-Core-Object id
+        :param connector_ids the connectors
+        :return void
+    """
+
+    def ask_enrichment(self, **kwargs):
+        element_id = kwargs.get("element_id", None)
+        connector_ids = kwargs.get("connector_ids", None)
+        query = """
+            mutation StixCoreObjectEdit($id: ID!, $connectorId: [ID!]!) {
+                stixCoreObjectEdit(id: $id) {
+                    askEnrichment(connectorId: $connectorId) {
+                      id
+                    }
+                }
+            }
+        """
+        self.opencti.query(
+            query,
+            {
+                "id": element_id,
+                "connectorId": connector_ids,
+            },
+        )
+
     """
         Share element to multiple organizations
 

pycti/utils/opencti_stix2.py

@@ -2487,8 +2487,9 @@ def organization_unshare(self, item):
         self.opencti.stix_core_object.organization_unshare(item["id"], organization_ids)
 
     def apply_opencti_operation(self, item, operation):
-        if operation == "delete":
+        if operation == "delete" or operation == "delete-force":
             delete_id = item["id"]
+            force_delete = operation == "delete-force"
             self.opencti.stix.delete(id=delete_id)
         elif operation == "merge":
             target_id = item["merge_target_id"]
@@ -2506,6 +2507,11 @@ def apply_opencti_operation(self, item, operation):
             self.organization_share(item=item)
         elif operation == "unshare":
             self.organization_unshare(item=item)
+        elif operation == "enrichment":
+            connector_ids = item["connector_ids"]
+            self.opencti.stix_core_object.ask_enrichment(
+                element_id=item["id"], connector_ids=connector_ids
+            )
         else:
             raise ValueError(
                 "Not supported opencti_operation",